Debian/awstats: unknown
awstats.pl in AWStats 6.8 and earlier does not properly remove quote characters, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the query_string parameter. NOTE: this
Action: Upgrade awstats to 6.7.dfsg-5.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.7.dfsg-5.1 | - |
Fixed versions
| 6.7.dfsg-5.1 |
Sources
published · modified · JSON